kamax-matrix / mxisd

Federated Matrix Identity Server
GNU Affero General Public License v3.0
220 stars 112 forks source link

How can I debug failing LDAP authentication? #94

Closed rsacher closed 5 years ago

rsacher commented 5 years ago

On riot.im with existing ActiveDirectory username and password, I only get "Invalid Login Data" (roughly translated from german "Ungültige Zugangsdaten"

How could I trace the problem ?

Snip of my mxisd config

ldap.enabled: true
ldap.connection.host: '10.0.0.111'
ldap.connection.port: 389
ldap.connection.bindDn: 'CN=ldapquery,CN=Users,DC=bgs,DC=ac,DC=at'
ldap.connection.bindPassword: '<password>'
ldap.connection.baseDn: 'DC=bgs,DC=ac,DC=at'
#- 'OU=moodle,OU=schuler,DC=bgs,DC=ac,DC=at'
#- 'OU=moodle,OU=schuler,DC=bgs,DC=ac,DC=at'

ldap.attribute.uid.type: 'uid'
ldap.attribute.uid.value: 'sAMAccountName'
ldap.attribute.name: 'displayName'
#ldap.attribute.threepid.email: 'mail'

ldap.directory.attribute.other:
  - 'sn'
  - 'memberOf'
  - 'givenName'

in my homeserver.yaml I have listed my identiy server, which is the same machine as matrix-server


trusted_third_party_id_servers:
    - www.bgschwechat.ac.at
#    - matrix.org
#    - vector.im
#    - riot.im
maxidorius commented 5 years ago

I'll need the mxisd logs about the login attempt - you can't really miss them. Make sure you post the whole section, not just the first/last line.

rsacher commented 5 years ago

Sorry, I really miss them - thats why I was asking - where are logs for mxisd located on Ubuntu ..? on journalctl I see no mention of failed login attempt

maxidorius commented 5 years ago

If you installed via the .deb packages, they are in syslog. mxisd just write to stdout which is put to syslog on debian/ubuntu

maxidorius commented 5 years ago

Indeed it's not called, you most likely skipped the setup steps in https://github.com/kamax-matrix/mxisd/blob/master/docs/features/authentication.md

rsacher commented 5 years ago

Thanks.... I overlooked this step: https://github.com/kamax-matrix/matrix-synapse-rest-auth Now it works fine - thank you!

maxidorius commented 5 years ago

Glad it works!